The data should reside exactly where they’re needed and nowhere else. For the UK NHS that’s probably in a UK data centre run by a UK company. Not AWS.
The fundamental problem with SaaS and pure server side applications is we do not know where the data are. With local first we can verify data locality.